Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
File: y9QcwSHgy2CjqY2_crpNvWPuvp8.mft (raw, json)
Hash identifier: EqQBok+8qE4qdMMots+VSJq+ZgX+LXkmt1Q/hhxyr+I=
Subject key identifier: C2:E7:08:D0:CF:0A:63:65:4C:0D:50:ED:5A:47:86:8E:D3:35:5E:2C
Authority key identifier: CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
Certificate issuer: /CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Certificate serial: 019F92EDFB834C6DC9F3553FC78C5D9E4E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
Manifest number: 11D5
Signing time: Fri 24 Jul 2026 07:01:37 +0000
Manifest this update: Fri 24 Jul 2026 07:01:37 +0000
Manifest next update: Sat 25 Jul 2026 07:01:37 +0000
Files and hashes: 1: FSVSgLOIDHB0tEHVWTFzxIji-0o.roa (hash: 9yWQzAfv05KEhodz5VlR9pyMWpBEu5c3XhVdOB7ou5U=)
2: QGfcSBUGzLQb4SyeZopBV9W3h_Y.roa (hash: Se8X87fnlsQ0jSr5BHgV/YmjxoXoJdb5PZSQdKSye9w=)
3: m4rs5cnwWBMbt76R1xpp4mTXG1U.roa (hash: xc1fI9WY5WV26D6LeKOgGd9/V7vnRh4zOrQlPCPXcyA=)
4: y9QcwSHgy2CjqY2_crpNvWPuvp8.crl (hash: l5+n9F63xp79Vh2Hve46FFx4qly9kUdbh06OSq0tiN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:fb:83:4c:6d:c9:f3:55:3f:c7:8c:5d:9e:4e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Validity
Not Before: Jul 24 07:01:37 2026 GMT
Not After : Jul 25 07:01:37 2026 GMT
Subject: CN=c2e708d0cf0a63654c0d50ed5a47868ed3355e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0b:2e:3e:07:f0:7e:07:93:e8:10:ed:20:fd:
52:db:b8:bc:94:27:87:c9:b4:86:1a:8e:c0:16:18:
46:1c:a4:91:19:43:14:b8:e9:f6:a3:19:0e:91:63:
0f:27:cf:21:d5:c5:34:38:d2:23:c7:bc:42:3d:de:
32:12:9e:37:75:07:8a:e9:ba:7a:09:d1:0d:46:df:
6e:4d:7c:cb:d3:ed:65:52:53:1a:02:4f:1e:64:a3:
d4:9c:c8:05:ca:d8:5f:6c:6d:0d:e2:3b:23:d5:5e:
df:e8:6c:40:3d:98:87:3c:9e:b4:3a:58:77:86:9b:
24:35:4c:a2:3e:4b:8d:13:35:da:9d:7e:e9:0c:9f:
b4:5d:94:00:4f:10:70:6d:95:dc:21:b9:b3:2b:cd:
9b:89:bf:56:58:74:9e:56:93:83:30:45:08:c7:d4:
d7:2f:f9:45:42:6c:21:e7:df:9f:b1:1b:50:3a:fd:
20:71:ed:23:cf:99:5e:7b:34:56:76:e0:b6:64:25:
c7:8b:74:4e:db:09:a5:ae:5c:6f:4c:d2:4a:c6:a7:
ee:ad:be:f5:d0:42:5a:cb:e1:89:10:f4:aa:7b:91:
1e:b8:5e:f3:c0:e9:c3:3d:4d:bb:d2:d3:af:2f:11:
d0:32:76:20:05:82:11:0f:59:63:90:4e:35:aa:b5:
3e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E7:08:D0:CF:0A:63:65:4C:0D:50:ED:5A:47:86:8E:D3:35:5E:2C
X509v3 Authority Key Identifier:
keyid:CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:2f:12:40:d4:6d:a7:d7:b4:29:64:a5:9a:f4:7b:d1:03:b1:
cc:81:05:d4:66:aa:b2:27:9d:13:a3:6c:72:00:33:58:4b:0c:
bb:9f:03:c1:ed:3f:e0:85:68:35:29:a6:9e:d3:33:83:4c:ab:
30:2f:57:32:fc:54:3b:44:5b:54:ef:02:b5:98:9c:61:1b:4d:
86:83:8a:14:e2:57:ba:fb:72:ee:9f:b4:60:2b:60:67:fd:52:
55:27:a6:09:2c:8d:fc:4c:9e:36:69:c8:e1:28:c8:0f:2a:43:
44:14:9f:7c:1a:1e:c8:59:21:93:2c:95:dd:2b:30:75:9c:85:
a3:06:ec:b4:78:24:99:2c:02:b9:f4:26:ab:ca:04:38:b0:02:
60:12:c1:5e:bd:95:7c:de:64:26:59:4a:31:78:a8:cd:a2:75:
76:01:6f:fe:9e:76:2d:7a:6e:47:93:dd:bd:55:f4:c7:76:bb:
db:68:f8:fc:7f:1d:d1:10:f1:de:15:f2:8a:16:13:c3:02:54:
f8:41:ac:53:68:24:59:71:d5:cb:c6:25:a7:26:bb:22:04:5e:
82:b0:87:39:05:48:bf:f4:1f:9b:88:0f:68:f2:f5:5e:de:e5:
11:9c:f4:25:85:f1:f2:9a:ce:ae:a2:84:7b:3a:42:41:4b:08:
10:d7:82:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7fuDTG3J81U/x4xdnk4/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDQxY2MxMjFlMGNiNjBhM2E5OGRiZjcyYmE0ZGJkNjNl
ZWJlOWYwHhcNMjYwNzI0MDcwMTM3WhcNMjYwNzI1MDcwMTM3WjAzMTEwLwYDVQQD
EyhjMmU3MDhkMGNmMGE2MzY1NGMwZDUwZWQ1YTQ3ODY4ZWQzMzU1ZTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gsuPgfwfgeT6BDtIP1S27i8lCeH
ybSGGo7AFhhGHKSRGUMUuOn2oxkOkWMPJ88h1cU0ONIjx7xCPd4yEp43dQeK6bp6
CdENRt9uTXzL0+1lUlMaAk8eZKPUnMgFythfbG0N4jsj1V7f6GxAPZiHPJ60Olh3
hpskNUyiPkuNEzXanX7pDJ+0XZQATxBwbZXcIbmzK82bib9WWHSeVpODMEUIx9TX
L/lFQmwh59+fsRtQOv0gce0jz5leezRWduC2ZCXHi3RO2wmlrlxvTNJKxqfurb71
0EJay+GJEPSqe5EeuF7zwOnDPU270tOvLxHQMnYgBYIRD1ljkE41qrU+3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLnCNDPCmNlTA1Q7VpHho7TNV4sMB8GA1UdIwQY
MBaAFMvUHMEh4Mtgo6mNv3K6Tb1j7r6fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlRY3dTSGd5MkNqcVkyX2NycE52V1B1dnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny83ZWI0ZTgtYmNiMS00OWVmLWI5NDQt
NTNhNWFmNzY1MzQzLzEveTlRY3dTSGd5MkNqcVkyX2NycE52V1B1dnA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny83ZWI0ZTgtYmNiMS00OWVmLWI5NDQtNTNhNWFmNzY1MzQz
LzEveTlRY3dTSGd5MkNqcVkyX2NycE52V1B1dnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUS8SQNRt
p9e0KWSlmvR70QOxzIEF1GaqsiedE6NscgAzWEsMu58Dwe0/4IVoNSmmntMzg0yr
MC9XMvxUO0RbVO8CtZicYRtNhoOKFOJXuvty7p+0YCtgZ/1SVSemCSyN/EyeNmnI
4SjIDypDRBSffBoeyFkhkyyV3SswdZyFowbstHgkmSwCufQmq8oEOLACYBLBXr2V
fN5kJllKMXiozaJ1dgFv/p52LXpuR5PdvVX0x3a722j4/H8d0RDx3hXyihYTwwJU
+EGsU2gkWXHVy8Ylpya7IgRegrCHOQVIv/Qfm4gPaPL1Xt7lEZz0JYXx8prOrqKE
ezpCQUsIENeCKg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:23:39 2026 by rpki-client